Vishing Attacks Are On The Rise, FBI Warns

Source: snapvoip.blogspot.com

The U.S. Federal Bureau of Investigation (FBI)’s Internet Crime Complaint Center (IC3) has issued a warning yesterday that so-called "vishing" attacks are on the rise. Vishing Attacks are scams where criminals send an e-mail, text message or a phone call to a victim, saying there has been a security problem and the victim needs to call his or her bank to reactivate a credit or debit card. Following is the warning from IC3.

VISHING ATTACKS INCREASE (This is the actual iC3 site link. If you hover over the link you can see it is actually "http://www.ic3.gov/media/2008/080117.htm" on your browsers status bar, at the bottom, it is one way to verify the actual link)

Are you one of many who have received an e-mail, text message, or telephone call, purportedly from your credit card/debit card company directing you to contact a telephone number to re-activate your card due to a security issue? The IC3 has received multiple reports on different variations of this scheme known as "vishing". These attacks against US financial institutions and consumers continue to rise at an alarming rate.

Vishing operates like phishing by persuading consumers to divulge their Personally Identifiable Information (PII), claiming their account was suspended, deactivated, or terminated. Recipients are directed to contact their bank via telephone number provided in the e-mail or by an automated recording. Upon calling the telephone number, the recipient is greeted with "Welcome to the bank of …" and then requested to enter their card number in order to resolve a pending security issue.

For authenticity, some fraudulent e-mails claim the bank would never contact customers to obtain the PII by any means, including e-mail, mail, and instant messenger. These e-mails further warn recipients not to provide sensitive information when requested in an e-mail and not to click on embedded links, claiming they could contain "malicious software aimed at capturing login credentials."

Please beware; spam e-mails may actually contain malicious code (malware) which can harm your computer. Do not open any unsolicited e-mail and do not click on any links provided.

A new version recently reported involved the sending of text messages to cell phones claiming the recipient’s on-line bank account has expired. The message instructs the recipient to renew their on-line bank account by using the link provided.

Due to rapidly evolving criminal methodologies, it is impossible to include every scenario. Therefore, be cognizant and protect your PII. Beware of e-mails, telephone calls, or text messages requesting your PII.

If you have a question concerning your account or credit/debit card, you should contact your bank using a telephone number obtained independently such as; from your statement, a telephone book, or another independent means.

If you have received this, or a similar hoax, please file a complaint at www.ic3.gov.

Published on January 18th, 2008 under ,


Last 20 posts tagged "VoIP Security"

VoIP Security Examined

Source: www.voip-news.com

Do you remember when anti-virus was a sometimes thing, when people didn’t worry about impending hackings and attempts to steal or corrupt critical data? That’s sort of like VoIP’s stat…

Published on May 19th, 2008 under , , , , ,

Over 100 Vulnerabilities in Leading Enterprise VoIP Systems Uncovered By VoIPshield

Source: snapvoip.blogspot.com

It was unbelievably shocking to see the vulnerability database and so many of them. Ignorance is a bliss until something bad happens to someone. Follow the link below to see the database of…

Published on April 3rd, 2008 under

New York Times Takes on VoIP Security

Source: www.voip-news.com

Ahhh, finally. I knew it had to happen sometime: the New York Times talking about VoIP (or more specifically, VoIP security).
So, what do they have to say about VoIP? Well, for starters, it is…

Published on April 3rd, 2008 under , , , , ,

Secure Skype IM With FaceTime Communications’ Greynet Enterprise Manager

Source: snapvoip.blogspot.com

BELMONT, CALIFORNIA - FaceTime Communications, the leading provider of solutions that control Internet and unified communications (UC) in [...]…

Published on March 27th, 2008 under ,

FBI VoIP Surveillance Docs

Source: snapvoip.blogspot.com

Slashdot has discussion on VoIP Surveillance focusing on FBI Electronic Surveillance Needs for Carrier-Grade Voice over Packet (CGVoP) Service. The 88 paged document, which is part of the CALEA…

Published on March 16th, 2008 under ,

Who Is Listening To Your VoIP Calls? (Unknown To You!)

Source: snapvoip.blogspot.com

quot;Who Might Be Spying on Your Communications? (Hint — It’s Not Just the NSA)", when I saw the title, I imagined a list of other government institutions and some phone companies…

Published on March 13th, 2008 under

VoIP News Tells You How To Secure Your VoIP Call

Source: snapvoip.blogspot.com

VoIP News has a "feature article" on VoIP Security. There are many VoIP Solutions for making VoIP calls but security that people used to get with (did we really?) is certainly diminished…

Published on February 24th, 2008 under ,

UM Labs Offering VoIP Security Launched By Peter Cox.

Source: snapvoip.blogspot.com

The creator of Proof of concept tool for VoIP Security that I wrote about a while ago, Peter Cox, together with Stuart Morrice has launched a new company UM Labs, to provide effective security…

Published on February 11th, 2008 under , ,

Vishing Attacks Are On The Rise, FBI Warns

Source: snapvoip.blogspot.com

The U.S. Federal Bureau of Investigation (FBI)’s Internet Crime Complaint Center (IC3) has issued a warning yesterday that so-called "vishing" attacks are on the rise. Vishing…

Published on January 18th, 2008 under ,

Top Five VoIP IP Telephony Vulnerabilities According To Sipera Viper Lab

Source: snapvoip.blogspot.com

Sipera VIPER Lab determined the Top 5 VoIP Vulnerabilities for 2007 were:
1) Remote eavesdropping of VoIP phone calls, a practice that is exponentially easier in VoIP than with traditional PSTN…

Published on December 12th, 2007 under

Secure Computing’s Sidewinder to Protect VoIP Communications At TeleCents Communications

Source: snapvoip.blogspot.com

Secure Computing Corporation (NASDAQ: SCUR), a leading enterprise gateway security company, today announced that TeleCents Communications has deployed Secure Computing Sidewinder® to provid…

Published on December 11th, 2007 under

Eavesdropping Is Possible On Cisco IP Phones

Source: snapvoip.blogspot.com

Cisco confirms that an attacker with valid Extension Mobility authentication credentials could cause a Cisco Unified IP Phone configured to use the Extension Mobility feature to transmit or receiv…

Published on November 30th, 2007 under

VoIP Security Education at ITEXPO East 2008

Source: snapvoip.blogspot.com

I have written about 100 posts related to VoIP Security. The latest (last week) being SIPtap (A Proof of Concept Tool), Taps into SIP Based VoIP Calls Records Them.A lot of sites have written…

Published on November 26th, 2007 under

SIPtap (A Proof of Concept Tool), Taps into SIP Based VoIP Calls Records Them.

Source: snapvoip.blogspot.com

I have mentioned security issues involving VoIP IP Telephony as close as few weeks ago as well as two years ago!Today I hear and see another side of it. Proof of concept of wire tapping and recording…

Published on November 22nd, 2007 under

VoIP Security Vulnerabilities to rise in 2008: McAfee

Source: snapvoip.blogspot.com

In McAfee’s predictions for 2008, McAfee Avert Labs Top 10 Threat Predictions for 2008has valuable information regarding over all security. Two of them relate to our industry and I hav…

Published on November 19th, 2007 under

Securing VoIP One More Way

Source: snapvoip.blogspot.com

From the article "Are VoIP systems prepared for attacks?" on SC magazine, I snipped the last of it, the advise. Although seems to be repeating the process of securing a any data network,…

Published on November 16th, 2007 under

VOIPSA: SIP Digest Access Authentication RELAY-ATTACK for Toll-Fraud

Source: snapvoip.blogspot.com

VOIPSA has posted a message on its VOIPSEC mailing list about "Breaking SIP for fun and toll fraud".From the mailing list;"In this post, we would like to inform abouta potentia…

Published on November 4th, 2007 under

VoIP and UC Best Practices Webinar

Source: snapvoip.blogspot.com

Security and managing threats are the last thing you want to consider when you are bringing up a Unified Communications (UC) project or Enterprise wide VoIP deployment. Because you would think…

Published on October 30th, 2007 under

Vonage and Others were Warned about SIP ID Theft, Eavesdropping and Other Exploits

Source: snapvoip.blogspot.com

Sipera, the VoIP security firm that I saw first at BlackHat 2007 has warned VoIP firms before disclosing the vulnerabilities. There are multiple vulnerabilities, advisories and they are listed…

Published on October 26th, 2007 under

SIP XSS attacks and Spam Over Skype (SOS), they come in pairs.

Source: snapvoip.blogspot.com

There are many a ways that hackers (Malicious ones) used to get on your PC or PCs. Now they have one more way to get on your PC and steal valuable information.
There are two warnings by two…

Published on October 19th, 2007 under
Member of "Hype Media! Network"